News
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
2 hours from now
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
By info@thehackernews.com (The Hacker News)
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.
More from The Hacker News
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
3 hours from now
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
2 hours from now
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
2 hours from now
Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
52 minutes from now
Why "Shady AI" is Security's Next Big Governance Problem
36 minutes from now